crimsonrat | 191be51494ba626d039470f78dc140b41c3d81ff71dd069ef118b5a8c76b0714 | Triage

Sharing

General

Target

191be51494ba626d039470f78dc140b41c3d81ff71dd069ef118b5a8c76b0714
Size

106KB
Sample

220129-yv55fshdc5
MD5

6746c430f978d0bc9bbecff87c651fa2
SHA1

0edc71cc01ec8d16aeddf0c807bb696966c83266
SHA256

191be51494ba626d039470f78dc140b41c3d81ff71dd069ef118b5a8c76b0714
SHA512

4f459b790e6b58eaf1a9550c95f87cb4f73a1c0e32dc6ce61ed5686c706f602b024d1e414bdbd4724d46e17e82da110f55ca5cbc8e2fdc33138e161e1ef40ec6

Score

10^/10

crimsonrat persistence

Malware Config

Targets

- Target
  
  191be51494ba626d039470f78dc140b41c3d81ff71dd069ef118b5a8c76b0714
- Size
  
  106KB
- MD5
  
  6746c430f978d0bc9bbecff87c651fa2
- SHA1
  
  0edc71cc01ec8d16aeddf0c807bb696966c83266
- SHA256
  
  191be51494ba626d039470f78dc140b41c3d81ff71dd069ef118b5a8c76b0714
- SHA512
  
  4f459b790e6b58eaf1a9550c95f87cb4f73a1c0e32dc6ce61ed5686c706f602b024d1e414bdbd4724d46e17e82da110f55ca5cbc8e2fdc33138e161e1ef40ec6
Score

6^/10

persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2